Overview

overview

10

Static

static

10

f540391d99...18.exe

windows7-x64

10

f540391d99...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f540391d9939d0493882cefdd612ce9c_JaffaCakes118

  • Size

    945KB

  • Sample

    240925-frh7eawhlq

  • MD5

    f540391d9939d0493882cefdd612ce9c

  • SHA1

    8f038cca1e1242b47ce2b7fb8b13ebff49e8d9e7

  • SHA256

    582a399a5e4e611ddaae03702d124f11ccdb1a425f4a8216f50c76f9b5bc32f3

  • SHA512

    93cc540d0c89a4aab490d889d31a53a32be465d660561859c127b839ba4ad993f3f1e4249fee9f12c72ae57568fa1fef2566367f014f64be8c47aed2946814c0

  • SSDEEP

    6144:3icpjCn4NoX7wO2oxPLHKOsz6mLwxSVPSr41KvbSVPSr41KvZBILUz:ycxCaA8jOsz6mLwIizvWizvgUz

Score
10/10
metasploitbackdoordiscoverytrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.1.121:8443/EGke

Targets

    • Target

      f540391d9939d0493882cefdd612ce9c_JaffaCakes118

    • Size

      945KB

    • MD5

      f540391d9939d0493882cefdd612ce9c

    • SHA1

      8f038cca1e1242b47ce2b7fb8b13ebff49e8d9e7

    • SHA256

      582a399a5e4e611ddaae03702d124f11ccdb1a425f4a8216f50c76f9b5bc32f3

    • SHA512

      93cc540d0c89a4aab490d889d31a53a32be465d660561859c127b839ba4ad993f3f1e4249fee9f12c72ae57568fa1fef2566367f014f64be8c47aed2946814c0

    • SSDEEP

      6144:3icpjCn4NoX7wO2oxPLHKOsz6mLwxSVPSr41KvbSVPSr41KvZBILUz:ycxCaA8jOsz6mLwIizvWizvgUz

    Score
    10/10
    metasploitbackdoordiscoverytrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks